CVE-2023-47380

medium

Description

Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).

References

https://www.getastra.com/blog/security-audit/reflected-xss-vulnerability-in-admidio/

https://www.admidio.org/intern/adm_program/modules/announcements/announcements.php?ann_uuid=714ead2b-1718-4251-a9a3-f1b0df12d60e&headline=Blog

https://github.com/Admidio/admidio/releases/tag/v4.2.13

Details

Source: Mitre, NVD

Published: 2023-11-22

Updated: 2023-12-01

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Severity: Medium

EPSS

EPSS: 0.00365